Critical · 9.8 CVE-2024-24000 EUVD-2024-21426GHSA-6xj8-7c6f-w9rq

jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the uploaded file type, an…

Published Feb 6, 2024 · Updated Jun 12, 2025 · Assigned by mitre

Description

jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the uploaded file type, and the biz parameter can be spliced into the upload path, resulting in arbitrary file uploads with controllable paths.

References

https://github.com/jishenghua/jshERP
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24000.txt